Return
-
Title
/opt/quest/bin/vastool create or join fails when using a service acct or keytab file for auth -
Description
When in a multiy domain or cross domain environment, using a service account or ketyab file fails to authenticate.
Running /opt/quest/bin/vastool create with a service account or keytab file for authentication fails with LDAP_INSUFFICIENT_ACCESS: Insufficient access to complete operation
OR
Running vastool join command with a keytab or service account for authentication fails with LDAP_INSUFFICIENT_ACCESS: Insufficient access to complete operation
Example:
/opt/quest/bin/vastool -u <service account name> -k <name and path to keytab file> join <yourdomain>
-
Cause
Product defect 313619:vastool create would failcross domain when using keytab as the authentication. -
Resolution
STATUS:
Fixed in Authentication Services 4.0.3.223 and up
RESOLUTION:
Upgrade to
Authentication Services 4.1 Maintenance Release
or
-
Change Request
313619